Lookonchain APP

App Store

Security Alert: The ClawHub Marketplace has discovered a total of 1184 malicious skills that may steal SSH keys, encrypt wallets, etc.

2026.02.20 11:12:57

On February 20, Cosmos Yu, founder of SlowMist, shared a security alert. As of now, 1,184 malicious AI skills have been identified on OpenClaw’s ClawHub marketplace. These skills can steal SSH keys, encrypt wallets and browser passwords, and spawn a reverse shell. A single attacker uploaded 677 of these packages. The top-ranked skill contains 9 vulnerabilities and has been downloaded thousands of times. Yu warned users that text is no longer just text—it’s a command. He recommended running AI tools in an isolated environment, as many OpenClaw skills pose potential risks. Additionally, in Web3 security, smart contracts are only one piece of the puzzle; the root cause of breaches is no longer limited to smart contracts. Just days ago, Moonwell suffered a $1.78 million hack, with the vulnerable code co-authored by Claude Opus 4.6.
Relevant content

Curve Founder: Cryptocurrency and AI Are Not in Competition, Both Are Foundational Technologies

On June 5, Curve founder Michael Egorov posted that widespread pessimism is gripping markets regarding Bitcoin and the broader crypto sector. The shift stems from crypto assets falling out of recent favor, as AI stocks now dominate the mainstream market. Egoror stressed crypto is far from a mere "toy"—it serves a real purpose: granting users self-sovereignty and building an always-on financial network that never halts. He added that institutions are increasingly adopting infrastructure that cuts out cumbersome intermediaries, making the crypto industry fundamentally stronger than it’s ever been. He also noted AI is a foundational technology but will navigate its own "uncanny valley" phase. Replacing humans with AI, he explained, creates a feedback loop where AI outputs become AI inputs, driving down quality and causing maintenance costs to grow exponentially. Major companies pushing AI’s widespread use may not implement it correctly, leading to inflated reported expenditures. Import

5 minutes ago

Impacted by the "New Stock God" Serenity's recommended buy order, Green Harmony saw a short-term surge of over 8%.

June 5 – Per Bitget data, fueled by “IPO God” Serenity’s “pump signal,” Green Harmony has seen a short-term surge of over 8% and is now trading at $352.7. Earlier, Serenity, known as the “IPO God,” noted that Green Harmony (ticker: 688017) is his top pick among Chinese listed firms in the humanoid robotics sector; the company is currently valued at around 57.73 billion yuan. China clearly holds a leading edge in scalable mass production, and many Western companies struggle to match Green Harmony’s cost levels. As physical AI advances toward large-scale deployment, he remains extremely bullish on the robotics sector.

5 minutes ago

The ZEC Unlimited Supply Vulnerability was discovered by Anthropic Opus 4.8, and ZEC plunged over 31% in the 24 hours following the discovery.

**Zcash Orchard Pool Vulnerability Triggers Emergency Fix, Sparks 31% ZEC Price Drop** Zcash founder Zooko Wilcox revealed in a June 5 post a severe counterfeiting vulnerability in the protocol’s Orchard privacy pool, a flaw that could be abused to create an unlimited, undetectable amount of fake ZEC tokens. Security researcher Taylor Hornby discovered the bug on May 29 using Anthropic’s Opus 4.8 model, then disclosed it to the Zcash Open Development Lab (ZODL). ZODL coordinated an emergency response across the Zcash ecosystem, with a fix rolled out on June 2. Hornby developed full working exploit code in a local regtest environment, which successfully generated unlimited untraceable counterfeit ZEC during testing. If run on Zcash’s mainnet, this tool would let attackers produce fake tokens that go undetected in user wallets. The vulnerability stems from an under-constrained component in the Orchard circuit: malicious actors can feed false inputs to elliptic curve multiplication, an

5 minutes ago

Binance to Delist 23 Stock Tokens including AB, ARLP

Per an official announcement, Binance will cease support for trading in certain stocks on June 5, 2026, at 19:00. The stocks being delisted in this round include: AB, ARLP, BSM, CAPL, CQP, DKL, DMLP, EPD, ET, GEL, GLP, IEP, MMLP, MPLX, NGL, NRP, PAA, SPH, SUN, UAN, USAC, WES, and WLKP.

5 minutes ago

「Today's Largest BTC Long Position」 Whale Opens 40x Short with $19.1 Million, All Ten Million Dollar Position Holders Bearish

June 5 — According to Hyperinsight’s monitoring (via their Telegram channel @HyperInsight), as of 10 hours prior to this report’s publication, three whales on Hyperliquid opened nine-figure BTC short positions today, all on the bearish side. Two of these whales have already placed buy orders, planning to take profits in stages once BTC drops below $60,000. Today’s largest BTC whale position details: The trader shorted 304.2 BTC with 40x leverage, valued at approximately $19.13 million, at an average entry price of $63,503, with a liquidation price of $64,081. This position was opened 6 hours ago; its current unrealized profit stands at $180,000 (up 39%). The first take-profit order is set at $60,250, with the take-profit range extending as low as $47,500. Wallet address: 0xd6803927489a9aa01500695c635f7f6747973496

5 minutes ago

「BTC OG Insider Whale」 ZEC Short Position Currently Holds Over $13.5 Million in Unrealized Gains

June 5 – Crypto analytics firm Onchain Lens reports that Zcash (ZEC) dropped below $400 amid a confirmed vulnerability in its Orchard Pool protocol. Separately, a trader dubbed the "BTC OG Insider Whale" is currently holding over $13.5 million in unrealized profits from a 3x leveraged short position on ZEC, while their 5x leveraged long position on Bitcoin (BTC) faces a loss of more than $17 million.

5 minutes ago